Vulnerabilities

TI-2008-02453 CVE-2008-2562 · GHSA-w74v-9gjp-9mwg

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote…

LOW 31

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the css_str parameter in an edit action.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00895 Published 2008-06-06 No fix listed CWE-89

TI-2006-06847 CVE-2006-7106 · GHSA-72f4-86jm-86f6

PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and…

LOW 37

PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02312 Published 2007-03-03 No fix listed CWE-94

TI-2002-01804 CVE-2002-1885 · GHSA-7v25-xm54-46x6

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger)…

MEDIUM 42

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06659 Published 2005-06-28 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote…

PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and…

PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger)…